<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2025-09-23","gaps":[],"covered":["EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting","url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting","title":"EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question]","family":"l3","work_id":"spaces/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting","status":"rejected question","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 23 September 2025","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"f9d61d51c9e5ae02","change_date":null,"nearest_versions":["2025-09-23"],"first_text_date":null,"correction_applies":false,"versions":["2025-09-23"],"version_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/versions/2025-09-23","revision_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/versions/2025-09-23/rev/f9d61d51c9e5ae02","versions_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/versions","relations_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/relations","source_line":"Question published in the EBA Q&A tool · no answer · not legislation · published 23 Sep 2025 [Rejected question]","attribution":{"prepared_by":"not stated in the document","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_question","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2025-09-23","question_submitted_on":"2025-02-07","locators":{"published_on":"EBA Q&A register entry 2025_7332, field 'Rejected publishing date'","question_submitted_on":"EBA Q&A register entry 2025_7332, field 'Submission date'"}},"adoption":null}}} -->
---
title: "EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question]"
shortTitle: "EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question]"
answer_id: EBA_QA_2025_7332
status: "Rejected question"
type: qa
instrument_type: qa
authority: EBA
binding: false
binding_character: non_binding
legal_status: withdrawn
regulation: "DORA"
dora_level3: true
mica_level2: false
legal_basis: "Article 30 DORA"
date: 23 September 2025
source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332
lifecycle: "Rejected question"
text_version: "EBA Q&A register, 23 September 2025"
source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332"
check_status: matched
verified: true
last_checked: 2026-10-26
checked_against: "the EBA publication"
source:
  prepared_by: "not stated in the document"
  published_by: "EBA"
  published_in: "EBA Single Rulebook Q&A tool"
  evidence:
    prepared_by: "Other"
    locator: "EBA Q&A register entry 2025_7332: no answer; the register names only the 'Type of submitter'"
document_type: "qa_question"
legal_nature: "not_legislation"
addressees: "not stated in the document"
dates:
  published_on: "2025-09-23"
  question_submitted_on: "2025-02-07"
  locators:
    published_on: "EBA Q&A register entry 2025_7332, field 'Rejected publishing date'"
    question_submitted_on: "EBA Q&A register entry 2025_7332, field 'Submission date'"
lifecycle_label: "Rejected question"
---

**Question published in the EBA Q&A tool · no answer · not legislation · published 23 Sep 2025 [Rejected question]**

*Rejected question · EBA Q&A register, 23 September 2025 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332)*

| | |
|---|---|
| **Full title** | EBA Q&A 2025_7332 — Q&A — Subcontracting \[Rejected question\] |
| **Prepared by** | Not stated in the document |
| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |
| **Reference** | EBA_QA_2025_7332 |
| **Document type** | Q&A |
| **Legal nature** | No answer · not legislation |
| **Addressees** | Not stated in the document |
| **Dates** | Published 23 September 2025; question submitted 7 February 2025 |
| **Legal basis** | [Article 30](https://www.headlesslaw.com/dora/articles/30) DORA |
| **Related instruments** | None recorded |
| **Text on this page** | Word for word — the full text of the EBA publication |

**Subcontracting**

### Question

Should a vendor be identified as a "subcontractor" simply because the ICT intra-group service provider to whom it provides services is part of a European financial group, even though the ICT services provided by the vendor are not connected to the ICT services provided by the intra-group service provider to FEs in their group.

### Background

Company A licenses payments software to Company B. Company B is not an FE, but is part of a financial group including EEA-regulated FEs as well as financial institutions in non-EEA jurisdictions. Company B provides ICT services in support of these FEs' CIFs and is therefore an intra-group ICT service provider. Company B also supports the financial institutions in the non-EEA jurisdictions.

The software provided by Company A to Company B is only used to support the operations of the non-EEA financial institutions; it is not used to support the operations/CIFs of any EEA FEs.

Company B insists that Company A is a subcontractor subject to DORA because Company B's group is a consolidated financial group and focuses on ICT risk management from a group perspective.

***

### Answer

This question has been rejected because it is considered that EBA guidance or clarification is not needed with regard to the issue that it raises. For example, this can be the case where it is considered that the existing regulatory framework is sufficiently clear and unambiguous, or where different practices may be possible but it is not currently necessary to harmonise these further through the Q&A process.

The Single Rule Book Q&A tool has been established to provide explanations and non-binding interpretations on questions relating to the practical application or implementation of the provisions of legislative acts referred to in Article 1(2) of the EBA’s founding Regulation, as well as associated delegated and implementing acts, and guidelines and recommendations, adopted under these legislative acts.

For further information on the purpose of this tool and on how to submit questions, please see “Additional background and guidance for asking questions”.

***

**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332)

## Related Level 1 articles

- [Article 30 — Key contractual provisions](../../../articles/30.md)